guid 1 IDOR – Unauthorized Access via Predictable Identifier Manipulation | User ID Controlled by Request Parameter Mar 29, 2026